Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/3137372e39332e38302e302f32312d3332203d3e20323633313432.roa
File:                     3137372e39332e38302e302f32312d3332203d3e20323633313432.roa (raw, json)
Hash identifier:          emsqDD6Ig6SqU2SDgdVyjS6uxVbKGsrVubMCKsTUz6I=
Subject key identifier:   7C:98:B8:C7:42:66:F4:63:F5:F2:B2:A2:AE:AB:3F:A0:5C:77:C9:F2
Certificate issuer:       /CN=1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35
Certificate serial:       2A7CA18E7A097D235B281ACB803A2A14ECB24630
Authority key identifier: 1C:E1:AC:D1:F8:52:9B:05:4D:A7:8D:1B:59:74:B8:D5:E8:46:FA:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/3137372e39332e38302e302f32312d3332203d3e20323633313432.roa
Signing time:             Tue 13 Oct 2026 11:59:22 +0000
ROA not before:           Tue 13 Oct 2026 11:54:22 +0000
ROA not after:            Tue 12 Oct 2027 11:59:22 +0000
asID:                     263142
IP address blocks:        177.93.80.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35.crl
                          rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 08:29:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:7c:a1:8e:7a:09:7d:23:5b:28:1a:cb:80:3a:2a:14:ec:b2:46:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35
        Validity
            Not Before: Oct 13 11:54:22 2026 GMT
            Not After : Oct 12 11:59:22 2027 GMT
        Subject: CN=7C98B8C74266F463F5F2B2A2AEAB3FA05C77C9F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:d3:4e:40:2e:cc:de:58:eb:c1:35:32:4b:23:
                    ab:30:16:ba:2b:77:20:6b:ab:fe:47:c3:10:73:88:
                    bb:8b:0a:21:e8:8f:9d:1b:8d:10:74:41:6c:e4:3c:
                    e7:9e:d1:60:dc:b1:14:ba:95:2e:00:6a:29:9f:73:
                    46:b1:75:6e:e8:af:de:32:c4:1b:37:f1:e8:98:7c:
                    a7:81:58:1e:96:87:e3:55:b4:db:d2:e9:d1:43:b2:
                    63:9f:cb:07:76:ba:93:fc:a3:f4:e5:10:a7:c6:0e:
                    13:e3:d7:a1:67:1f:32:72:03:ce:04:9b:5c:b3:30:
                    64:87:09:05:08:a0:c2:b7:c9:6a:85:77:d9:1e:a9:
                    a2:4b:32:96:3f:59:ea:ca:a0:bd:f1:e4:32:d4:2b:
                    c9:4a:a6:81:c1:f2:25:88:43:52:e2:8a:40:8f:4f:
                    3f:d4:28:07:3f:5f:94:98:8c:6b:1d:32:98:86:50:
                    08:7d:3d:fe:47:e5:68:2d:a6:ce:55:a8:5c:a3:d8:
                    e8:b3:37:d0:38:52:d7:7f:e8:9f:2d:05:7c:e1:60:
                    aa:b9:28:24:b6:51:3f:bb:1c:e8:b9:49:d6:7c:fb:
                    6e:e3:6a:b3:9f:4d:32:45:16:7a:92:c7:15:bd:79:
                    d2:77:29:84:8d:7f:0a:8e:29:7e:a3:20:e2:36:a0:
                    0d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:98:B8:C7:42:66:F4:63:F5:F2:B2:A2:AE:AB:3F:A0:5C:77:C9:F2
            X509v3 Authority Key Identifier:
                keyid:1C:E1:AC:D1:F8:52:9B:05:4D:A7:8D:1B:59:74:B8:D5:E8:46:FA:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CE1ACD1F8529B054DA78D1B5974B8D5E846FA35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8YSQJCYJvkKQqPrBffxDwqBGeZ8iZLHvy7m8iT6QJxsY/0/3137372e39332e38302e302f32312d3332203d3e20323633313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.93.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0c:ad:21:38:e3:57:7e:7d:05:38:bf:5f:be:fc:1b:7b:fe:6c:
         bc:59:0e:11:43:c7:42:8e:e9:d5:cc:7d:bc:7f:f1:04:5d:d8:
         8e:d7:54:4a:17:e5:31:3b:fc:bd:5e:9b:6d:25:69:c1:ed:c8:
         1f:32:32:db:70:32:51:af:68:d9:09:47:7c:de:f5:ca:94:e3:
         f3:54:75:a4:00:5c:64:0a:ca:0f:5a:40:63:1e:cf:4f:1a:bf:
         3d:c6:e0:d6:35:a2:4c:d2:12:38:9c:23:63:c5:ff:8e:3b:2b:
         cc:ff:db:bd:fd:29:fe:ec:df:c0:b1:6e:b0:e0:f7:dc:2c:fb:
         b8:83:ca:ba:2b:06:ba:76:05:0b:09:e3:57:c3:b8:d7:7c:f4:
         87:41:d9:71:23:d6:ff:15:eb:3d:ef:85:3d:9c:f6:c2:c8:ce:
         1c:b1:3a:11:97:e3:3a:04:a6:b7:43:76:0d:ae:99:67:41:57:
         7c:7c:aa:e7:85:42:34:2d:8b:38:20:e0:14:e9:56:1e:2f:be:
         5a:b2:ef:88:8a:d1:5b:75:27:2c:b9:fe:3f:ee:b4:6f:62:b7:
         a1:9d:5e:25:ce:db:ab:93:6c:1d:32:c2:d7:5a:a9:c1:e2:d1:
         7d:1a:ed:20:40:59:50:ef:36:4c:fe:dc:2c:cb:d8:56:71:64:
         44:6d:27:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 16:51:23 2026 by rpki-client